給点阳光 发表于 2012-9-29 09:55:41

如何让开机启动项不出现在msconfig中?

有如下语句:
RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run","test","REG_SZ",@SystemDir&"\test.exe")

我在注册表中写了一个开机启动项,让test.exe开机运行,但是当打开msconfig系统配置文件时test.exe会出现在"启动"项里面,如何实现让开机启动项不出现在msconfig中?

zch11230 发表于 2012-9-29 22:43:42

能够自启的地方多比如winlogon 不过其它地方很容易被安全软件干掉。

Neuis 发表于 2012-10-22 09:03:00

回复 1# 給点阳光
直接改BCD就好了。你是vista以上操作系统就用bcdeidt就可以查看你的启动项，若是XP就用一个简单的文本编辑器来修改Boot.ini（或用NT52自带工具 Bootcfg）的方式来管理启动选项
：注意修改BCD时请先备份。

Neuis 发表于 2012-10-22 09:03:11

回复 1# 給点阳光
直接改BCD就好了。你是vista以上操作系统就用bcdeidt就可以查看你的启动项，若是XP就用一个简单的文本编辑器来修改Boot.ini（或用NT52自带工具 Bootcfg）的方式来管理启动选项
：注意修改BCD时请先备份。

gm860419 发表于 2012-10-22 22:48:21

都是 高手是准备做病毒是阿

jiushizhu 发表于 2012-10-28 19:51:51

最好是用系统服务

netegg 发表于 2012-10-28 22:06:15

本帖最后由 netegg 于 2012-10-28 22:07 编辑

"HKCU\SOFTWARE\Policies\Microsoft\Windows\SYSTEM\Scripts"
"HKCU\SOFTWARE\Policies\Microsoft\Windows\SYSTEM\Scripts\Logon"
"HKCU\SOFTWARE\Microsoft\Windows\SYSTEM\Scripts"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SYSTEM\Shell"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\RunonceEx"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\UrlSearchHooks"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions"
"HKCU\SOFTWARE\Microsoft\Command Processor\Autorun"
"HKCU\Control Panel\Desktop\Scrnsave.exe"
"HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms"
"HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute"
"HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDlls"
"HKLM\SYSTEM\CurrentControlSet\Control\BootVerificationProgram\ImageName"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SYSTEM\Shell"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects"
"HKLM\SOFTWARE\Classes\Protocols\Filter"
"HKLM\SOFTWARE\Classes\Protocols\Handler"
"HKLM\SOFTWARE\Classes\Folder\Shellex\ColumnHandlers"
"HKLM\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components"
"HKLM\SOFTWARE\Microsoft\Command Processor\Autorun"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\RunonceEx"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SYSTEM"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman"
"HKLM\SOFTWARE\Policies\Microsoft\Windows\SYSTEM\Scripts"
"HKLM\SOFTWARE\Policies\Microsoft\Windows\SYSTEM\Scripts\Logon"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
@StartupCommonDir
@StartupDir自己看着加，au3做系统服务很多时候成功不了，相对来说，这个启动项位置算比较全了

unique009 发表于 2012-10-29 13:45:13

计划任务好像也不会出现在msconfig那里面吧,建一个开机启动的任务
页: [1]
查看完整版本: 如何让开机启动项不出现在msconfig中?